HP HP Certifications HPE6-A67 Questions & Answers

• Question 81:

  What are two ways that devices can download the Onboard provisioning profile and credentials from ClearPass? (Choose two.)

  A. from the Android market

  B. Over-the-Air API

  C. download from iTunes

  D. Bonjour

  Correct Answer: BD

• Question 82:

  In ClearPass guest, which statement is true? (Choose three.)

  A. All guest accounts will be assigned a role of Guest and that cannot be changed.

  B. The Create Guest Account form is fully configurable and fields can be edited.

  C. Account Expiration date and time cannot be edited by the administrator.

  D. A guest User is automatically disconnected from the network when their account expires.

  E. A guest user will be denied access to the network after their account expires but is not disconnected.

  F. A visitor location data field can be added to a guest registration form.

  Correct Answer: ADF

• Question 83:

  Which options support DHCP profiling for devices in a network? (Choose two.)

  A. configuring ClearPass as a DHCP relay for the client

  B. enabling the DHCP server to profile endpoints and forward meta-data to ClearPass

  C. enabling DHCP relay on our network access devices so DHCP requests are forwarded to ClearPass

  D. enabling the DHCP server to forward DHCP traffic to ClearPass

  E. DHCP profiling is enabled on ClearPass by default; configuration of the network access devices is not necessary

  Correct Answer: AC

• Question 84:

  You have Guest Self-Registration with Internal Sponsorship configured and wish to send users their

  credentials automatically.

  Which options need to be enabled? (Choose two.)

  A. Configure the receipt page actions to send a receipt.

  B. Configure the receipt page form to include the Guest Username and password.

  C. Configure an Email Server in ClearPass Guest Administration.

  D. Configure the Sponsor Confirmation Settings to send an email receipt to the Guest.

  E. Configure an Email Server in ClearPass Policy Manager Administration.

  Correct Answer: AB

• Question 85:

  A ClearPass deployment needs to be designed to determine which department the employee is in on the Active Directory Server and whether the user's device is a computer or smart device. Which Policy Manager components will the network administrator need to use? (Choose three.)

  A. Posture

  B. Onboard

  C. Profiler

  D. Enforcement

  E. Authorization

  F. Authentication

  Correct Answer: BCF

• Question 86:

  Refer to the exhibit.

  

  An administrator has enabled `department' and `memberOf' as roles. Which effect will this have on Enforcement?

  A. The user's memberOf attribute is sent back to the controller as a firewall role.

  B. The user's authentication will be rejected if the user does not have a department attribute in AD.

  C. The user's department and group membership must be included in role mapping rules.

  D. The user's department and group membership will be available as roles for evaluation by the enforcement policy.

  Correct Answer: C

• Question 87:

  A customer would like to authenticate employees using a captive portal guest web login page. Employees

  should use their AD credentials to login on this page.

  Which statement is true?

  A. Employees must be taken to a separate web login page on the guest network.

  B. The customer needs to add second guest service in the policy manager for the guest network.

  C. The customer needs to add the AD server as an authentication source in a guest service.

  D. The customer needs to add the AD servers RADIUS certificate to the guest network.

  Correct Answer: C

• Question 88:

  What is a RADIUS Change of Authorization?

  A. It allows ClearPass to change the user role for the client without disconnecting.

  B. It allows ClearPass to transmit messages to the NAD/NAS to modify a user's session status.

  C. It forces the client to re-authenticate upon roaming to an access point.

  D. It is a mechanism that allows ClearPass to assign a new VLAN to a wired user.

  Correct Answer: B

• Question 89:

  Which Authorization Source supports device profile enforcement?

  A. Local User Repository

  B. OnGuard Repository

  C. Endpoints Repository

  D. Guest User Repository

  Correct Answer: A

• Question 90:

  When a role mapping policy should be used in an 802.1x service with Active Directory as the authentication source?

  A. When you want to send roles from the AD user to enforcement policies directly from AD attributes.

  B. When you want to send Aruba firewall roles back to the Aruba Network Access Drive.

  C. When you want to translate and combine AD attributes into ClearPass roles.

  D. When you want to enable attributes as roles directly without combining multiple attributes

  Correct Answer: A